A Model-Theoretic Semantics 
for Defeasible Logic * 



Michael J. Maher 

Department of Computer Science 
Loyola University Chicago 
mjmOcs . luc . edu 

CIT, Griffith University 
Nathan, QLD 4111, Australia 



Abstract. Defeasible logic is an efficient logic for defeasible reasoning. 
It is defined through a proof theory and, until now, has had no model 
theory. In this paper a model-theoretic semantics is given for defeasible 
logic. The logic is sound and complete with respect to the semantics. 
We also briefly outline how this approach extends to a wide range of 
defeasible logics. 



1 Introduction 

Defeasible logic is a logic designed for efficient defeasible reasoning. The logic 
was designed by Nute |2^,Q with the intention that it be efficiently imple- 
mentable. This intention has been realised in systems that can process hundreds 
of thousands of defeasible rules quickly pl| . Over the years, Nute and others 
have proposed many variants of defeasible logic |24|,|| . In this paper we will ad- 
dress a particular defeasible logic, which we denote by DL p,Q. However, this 
work is easily modified to address other defeasible logics. 

Defeasible logics are, in general, paraconsistent. The nature of defeasible rea- 
soning, where one chain of reasoning may defeat another, predisposes the logics 
to avoid inconsistent inferences, and provides for a natural treatment of incon- 
sistencies, when they occur. In the case of DL, which supports only sceptical 
reasoning, inconsistent inferences are almost completely avoided. They only oc- 
cur as a result of inconsistencies in the definite knowledge expressed by a theory. 
When such inconsistencies occur, the inconsistent literals may be used individ- 
ually - or even together - in further inferences, but no form of ex falso quodlibet 
reasoning is possible. 

DL, and similar logics, have been proposed as the appropriate language for 
executable regulations 0], negotiations contracts J|(|, and business rules 



14 . The logics are considered to have satisfactory expressiveness and the effi- 



ciency of the implementations supports real-time response in applications such 
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as electronic commerce |l4,^T). Indeed, propositional DL has been shown to have 
linear time complexity 19 j. 

On the other hand, neither DL nor any other variant of modern defeasible 
logic has a model theory. DL is defined purely in proof-theoretic terms |24|||- 
Furthermore, a model theory based on the idea of extensions (such as is used 
for default logic) is likely to be inappropriate for defeasible logic, since the kind 
of scepticism that is developed from intersection of extensions in default logic is 
different from the kind of "direct" scepticism |15[ that occurs in defeasible logic 
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In early work on semantics for defeasible logics, Nute [g3j defined a model 
theory for LDR, a substantially simpler precursor of DL, in terms of a mini- 
mal belief state for each theory. LDR defines defeat only in terms of definite 
provability; this limitation is the main reason why the approach is successful 



23| . Recently, this approach has been extended |||25| to a defeasible logic that 
is closer to DL, and more general in some respects. However, the semantics is 
based on the idea of intersection of extensions and - perhaps consequently - the 
logic is sound but not complete for this semantics. 

Although there is not a model theory for defeasible logic, there has been 
work on providing a semantics for DL in other styles. In p0| we showed that 
DL can be defined in terms of a metaprogram, defined to reflect the inference 
rules of the logic, and a semantics for the language of the metaprogram. This 
approach was successful in establishing a relationship between DL and Kunen's 
semantics of negation-as-failure. Although it did not directly address model- 
theoretic reasoning, we will use this semantics as a key intermediate step in 
verifying the correctness of our model-theoretic semantics. 

We have described DL and its variants in argumentation-theoretic terms 



12 Such a characterization is useful for the applications of the logic that 
we have in mind, but the resulting semantics is again a meta-level treatment of 
the proof theory: proof trees are grouped together as arguments, and conflict- 
ing arguments are resolved by notions of argument defeat that reflect defeat in 
defeasible logic. Thus this work also fails to address model theory. 

Finally, a denotational-style semantics |^8| has been given to DL The 
semantics is compositional, and fully abstract in all but one syntactic class. 
Although this semantics provides a useful analysis of DL, it does not provide a 
model theory. 

In this paper, we define a model-theoretic semantics for DL. This seman- 
tics follows Nute's semantics for LDR in that models represent a state of mind 
or "belief state" in which definite knowledge (that which is "known" ) is distin- 
guished from defeasible knowledge (that which is "believed"). A major difference 
from |2^] is that it adopts partial models as the basis from which to work. The 
approach can be adapted easily to a wide range of defeasible logics. 

The structure of the paper is as follows. In the next section we introduce the 
constructs of defeasible logic, and the proof theory of DL. We then introduce 
the model-theoretic semantics and prove the soundness and completeness of the 
proof system with respect to this semantics. Finally, we discuss the extension 
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of this work to other defeasible logics, including logics which admit pre-defined 
relations - constraints in the sense of constraint logic programming |T(j| ] . 

2 The Defeasible Logic DL 

We begin by presenting the basic ingredients of defeasible logic. A defeasible 
theory contains five different kinds of knowledge: facts, strict rules, defeasible 
rules, dcfcatcrs, and a superiority relation. 

Facts are indisputable statements, for example, "Tweety is an emu" . This 
might be expressed as emu(tweety) . 

Strict rules are rules in the traditional sense: whenever the premises are 
indisputable (e.g. facts) then so is the conclusion. An example of a strict rule is 
"Emus are birds" . Written formally: 

emu(X) — » bird(X). 

Defeasible rules are rules that can be defeated by contrary evidence. An example 
of such a rule is "Birds typically fly" ; written formally: 

bird(X) ^ flies(X) 

The idea is that if we know that something is a bird, then we may conclude that 
it flies, unless there is other evidence suggesting that it may not fly. 

Defeaters are rules that cannot be used to draw any conclusions. Their only 
use is to prevent some conclusions. In other words, they are used to defeat some 
defeasible rules by producing evidence to the contrary. An example is "If an 
animal is heavy then it might not be able to fly" . Formally: 

heavy(X) ~* ->flies(X) 

The main point is that the information that an animal is heavy is not sufficient 
evidence to conclude that it doesn't fly. It is only evidence that the animal may 
not be able to fly. In other words, we don't wish to conclude -> flies (tweety) if 
heavy (tweety), we simply want to prevent a conclusion flies (tweety). 

The superiority relation among rules is used to define priorities among rules, 
that is, where one rule may override the conclusion of another rule. For example, 
given the defeasible rules 

r: bird(X) => flies(X) 

r' : brokenWing(X) =^ -^flies(X) 

which contradict one another, no conclusive decision can be made about whether 
a bird with a broken wing can fly. But if we introduce a superiority relation > 
with r' > r, then we can indeed conclude that the bird cannot fly. We assume 
that > is acyclic. It turns out that we only need to define the superiority relation 
over rules with contradictory conclusions. 
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We now turn to a formal description of the language of defeasible logic and 
the inference rules of the defeasible logic DL. 

We assume a signature £ containing predefined function and predicate sym- 
bols, including =, with their arities. Initially, we will assume that it contains 
only constants and =. Later we will consider the full generality of S. We also 
assume a signature 77 containing the set of predicate symbols, with their arities, 
that are defined by a defeasible theory. 

An atom has the form p(t\, ... , t n ) where p £ II has arity n and ti, . . . ,t n 
are terms. A literal has the form a or -ia, where a is an atom. 

A rule r consists of an optional label, an antecedent (or body) A(r) which is 
a finite set of literals, an arrow, and its head, which is a literal. Given a set 7? 
of rules, we denote the set of all strict rules in 7? by 7? s , the set of strict and 
defeasible rules in 7? by R s d, the set of defeasible rules in R by Rd, and the set 
of defeaters in 7? by Rdft- R[q] denotes the set of rules in 7? with head q. If q is a 
literal, denotes the complementary literal (if q is a positive literal p then ^q 
is -ip; and if q is -ip, then ^q is p). 

A defeasible theory T is a triple (F,R, >) where F is a finite set of literals 
(called facts), R a finite set of rules, and > a superiority relation on the labels 
of 7?. 

Example 1. We will use the following defeasible theory to demonstrate some 
elements of defeasible logic. We assume there are only the constants ethel and 
tweety in the language. Let T btrd = {F bird ,R bird , > btrd ) where: F bird is the set of 
facts 

emu(ethel) . 
bird(tweety). 

Rbird is represented by the set of rule schemas 



n : emu(X) — > bird(X). 

r 2 : bird(X)=> flies (X). 

r% : heavy (X) ^ -^flies(X). 

r 4 : brokenWing(X) => ^flies(X). 
r 5 : => heavy(ethel). 



and the superiority relation > b i rd contains only n > blr d ^2- 

The five rule schemas give rise to nine propositional rules by instantiating 
each variable to ethel and tweety respectively. Those rules, which make up R b i r d 
are 





emu(ethel) 


— > bird (ethel). 




emu(tweety) 


—* bird (tweety). 




bird(ethel) 


flies (ethel). 


r 2 ,t 


bird (tweety) 


flies (tweety). 




heavy (ethel) 


~> -i flies (ethel). 




heavy(tweety) 


~> -i flies (tweety) 


T4,e 


broken Wing (ethel) 


=> -i flies (ethel). 


n,t 


broken Wing (tweety) 


=> ^flies(tweety) 


r-5 : 




heavy (ethel). 
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The rules have been re-labelled purely to simplify later reference^. As a re- 
sult, the superiority relation becomes {r 4je > bird r 2 , e ,r 4 , e > blrd r 2 , t ,r^t >bird 
r 2,e,r^t >Mrd r 2,t}- As noted in earlier, the two statements r 4i6 >urd T2,t and 
f4,t >bird f2,e have no effect, since they do not involve rules with conflicting 
heads. 

In this defeasible theory, R s — {ri te ,r\ t} and Rd[~~> flies (tweety)] — {ra t t,r4 t t}. 

A conclusion of T is a tagged literal and can have one of the following four 
forms: 

+Aq, which is intended to mean that the literal q is definitely provable in T 
(i.e., using only facts and strict rules). 

—Aq, which is intended to mean that we have proved that q is not definitely 
provable in T . 

+dq, which is intended to mean that q is defeasibly provable in T . 

—dq which is intended to mean that we have proved that q is not defeasibly 

provable in T. 

Thus, conclusions are meta-theoretical statements about provability. They 
do not appear in a defeasible theory. Notice the distinction between — , which is 
used only to express failure-to-prove, and -i, which expresses classical negation. 
For example, —A— 'flies (tweety) means that it has been proved that the negated 
proposition -> flies (tweety) cannot be proved definitely in the defeasible theory 

Provability is based on the concept of a derivation (or proof) in T = (F, R,>). 
A derivation is a finite sequence P = (-P(l), • • ■ P(n)) of conclusions constructed 
by inference rules. 

The preceding descriptions and definitions are common to many variants 
of defeasible logic, although in some variants the limitation to four tags and 
four forms of conclusion has been discarded Q. The inference rules we present 
below are specific to, and characterize, the defeasible logic DL. We follow the 
presentation of Billington || . 

There are four inference rules for DL (corresponding to the four kinds of 
conclusion) that specify how a derivation can be extended. The formulation of 
these inference rules assumes a propositional defeasible theory. (P(l..i) denotes 
the initial part of the sequence P of length i): 

+A: We may append P(i + 1) = +Aq if either 
q G F or 

3r G R s [q] Va G A(r) : +Aa G P(l..i) 

This means, to prove +Aq we need to establish a proof for q using facts and 
strict rules only. This is a deduction in the classical sense. To prove — Aq it is 
required to show that every attempt to prove +Aq fails in a finite time. Thus 
the inference rule for — A is the constructive complement of the inference rule 
for +A @. 

1 Without the re-labelling we would have different rules with the same label. This is 
not a problem, formally, but might be confusing. 
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—A: We may append P(i + 1) = — Aq if 
q F and 

Vr S R s [q] 3a e A(r) : -Aa G P{l..i) 

From Turd in Example |l| we can infer +Aemu(ethel) (and +Abird(tweety)) 
immediately, in a proof of length 1. Using n, e and the second clause of the 
inference rule, we can infer +Abird(ethel) in a proof of length 2. We can in- 
fer —Aheavy(tweety) and —A-> flies (tweety) immediately (among many others), 
since in these cases R s [q] is empty. 

The inference rule for defeasible conclusions is complicated by the defeasible 
nature of DL: opposing chains of reasoning must be taken into account. 

+d: We may append P(i + 1) = +dq if either 

(1) +Aq e P(L.i) or 

(2) (2.1) 3r G R s d[q}Va € Air) : +da G P(l.i) and 

(2.2) -A~q G P(l..i) and 

(2.3) Vs G R\~q] either 

(2.3.1) 3a e A(s) : -5a £ P(l..«) or 

(2.3.2) 3t S P s d[g] such that 

Va G A(i) : +da G P(l..i) and f > s 

Let us work through this inference rule. To show that q is provable defeasibly 
we have two choices: (1) We show that q is already definitely provable; or (2) we 
need to argue using the defeasible part of T as well. In particular, we require 
that there must be a strict or defeasible rule with head q which can be applied 
(2.1). But now we need to consider possible "attacks", that is, reasoning chains 
in support of ~g. To be more specific: to prove q defeasibly we must show that 
~q is not definitely provable (2.2). Also (2.3) we must consider the set of all 
rules which are not known to be inapplicable and which have head ~ q (note 
that here we consider defeaters, too, whereas they could not be used to support 
the conclusion q; this is in line with the motivation of defeaters given earlier). 
Essentially each such rule s attacks the conclusion q. For q to be provable, each 
such rule s must be counterattacked by a rule t with head q with the following 
properties: (i) t must be applicable at this point, and (ii) t must be stronger than 
s. Thus each attack on the conclusion q must be counterattacked by a stronger 
rule. 

From Tbi r d in Example [l] we can infer +dbird(ethel) in a proof of length 3, 
using part (1) of the +d inference rule, we can infer +dbird(ethel) in a proof of 
length 3, using (1). Other applications of this inference rule first require appli- 
cation of the inference rule —d. This inference rule completes the definition of 
the proof system of defeasible logic. It is a strong negation of the inference rule 
+d !■ 

—d: We may append P(i + 1) = — dq if 

(1) -Aq G P(l..i) and 

(2) (2.1) Vr G R sd [q] 3a G A(r) : -da G P(l.i) or 
(2.2) +A~q G P(1.A) or 
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(2.3) 3s G R^q] such that 

(2.3.1) Va G A(s) : +da G P(l..«) and 

(2.3.2) Vf G R sd [q] either 

3a G : -da G P(l.i) or t ^ s 

To prove that q is not defeasibly provable, we must first establish that it is 
not definitely provable. Then we must establish that it cannot be proven using 
the defeasible part of the theory. There are three possibilities to achieve this: 
either we have established that none of the (strict and defeasible) rules with 
head q can be applied (2.1); or^q is definitely provable (2.2); or there must be 
an applicable rule s with head ~q such that no possibly applicable rule t with 
head q is superior to s (2.3). 

From Tbi r d hi Example [j] we can infer —dbrokenWing(ethel) with a proof of 
length 2 using (1) and (2.1), since R[q] is empty. Employing this conclusion, we 
can then infer —d->flies(ethel), again using (2.1), since the only rule r is r^ e . 
Using rs, we can infer + d heavy (ethel) by (2) of the inference rule +<9; (2.3) 
holds since R\^q] is empty. Using (2.3) of the inference rule — <9, we can infer 
—d flies (ethel), where the role of s is taken by r^^ e . 

Furthermore, we can infer —dbrokenWing(tweety) and —d heavy (tweety) us- 
ing (2.1) of inference rule —d, since in both cases R s d[q] is empty. Employing 
those conclusions, we can then infer —d->flies(tweety) 1 again using (2.1), since 
the only rules for -> flies (tweety) involve antecedents already established to be 
unprovable defeasibly. Now, using this conclusion, we can use (2), specifically 
(2.1), of the inference rule +d to infer +8 flies (tweety). 

We write The, where T is a defeasible theory and c is a conclusion, if there 
is a proof in T that ends with c. For example, Third b +dflies(tweety) . 

It is clear that DL is a paraconsistent logic. If a defeasible theory T contains 
facts a and ->a and a rule b — > 6, then the inconsistency concerning a has no 
effect on what is provable about b. When considering defeasible reasoning, a main 
feature of defeasible logics is that potentially inconsistent inferences are avoided 
either by use of the superiority relation or by simply failing to infer either of the 
consequences, as in the previous discussion of a bird with a broken wing. Some 
inconsistent defeasible inferences may be made, as consequences of inconsistent 
definite inferences, but the logic displays the same kind of paraconsistency as 
discussed above for definite reasoning. 

3 A Model-Theoretic Semantics 

A domain is a I7-structure T> that defines a set D of objects over which for- 
mulas may be interpreted, and gives a meaning to all function symbols and 
pre-defined predicate symbols as functions (respectively, relations) over D. = 
is interpreted as identity on D. Given a domain T>, the 2?-base of a language is 
Bt> = {p(di, ■ • ■ , d n ), -ip(d±, . . . , d n ) | n > 0,p G II, p has arity n,di G D for i 
1.2... , n}. We sometimes refer to elements of Bx> as interpreted literals. 

The following definition introduces the notion of a defeasible interpretation. 
It is formulated in a truth-functional manner to simplify later statements, but 
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it might equally well be formulated without introducing truth, at the expense of 
clumsier definitions later. 

Definition 1. A defeasible interpretation I consists of a domain T>x, and two 
partial functions I a and Ig which map B?> x to {True, False}, which satisfy the 
following conditions^ 

Vq G Bx> x 1a(o) — True — > Ig(q) = True 

and 

Vg G Bx> x Ig(q) — False — > Ia(q) — False 
A T> -interpretation is a defeasible interpretation over the domain T>. 

Intuitively, Ia specifies those evaluated literals that are known definitely 
(map to True) or known not to be known definitely (map to False). Similarly, 
Ig specifies those evaluated literals that are believed defeasibly (map to True) 
or known not to be defeasibly believed (map to False). Thus a defeasible inter- 
pretation represents a state of mind in which some evaluated literals are known 
or believed, while for others there is awareness that they are not known or be- 
lieved, and still others have undefined status - neither known, nor unknown; 
neither believed, nor unbelieved. We refer to the values of Ia and Ig on an 
evaluated literal q as the epistemic status of q in I. 

The two conditions on defeasible interpretations enforce that that which is 
known is believed, and that which is not believed is not known. In other words, 
they enforce the expected relationship between knowledge and belief. 

The functions Ia and Ig are easily extended to conjunctions of evaluated 
literals. The extension follows the same pattern for both functions, so we show 
only I&. 

n 

2a(<?i, • ■ ■ ,q n ) = /\Ia(<h) 

i=l 

where the truth table for A is 





True 


False 


undefined 


True 


True 


False 


undefined 


False 


False 


False 


False 


undefined 


undefined 


False 


undefined 



Among the ^-interpretations, we distinguish the T>-models of a defeasible 
theory T: those I?- interpretations which are consistent with the rules of reasoning 
specified by T and DL. 

2 Actually these conditions need not be imposed: even if we did not impose them 
on interpretations, all models of a defeasible theory satisfy these conditions. But we 
prefer to explicitly require that interpretations respect this fundamental relationship 
between definite and defeasible knowledge. 
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Definition 2. A T> -interpretation T is a 2?-modcl if it satisfies the following 
four conditions. Let q range over elements of B-p . 

lA(q) = True iff 

q E F or 

3r G R s [q] Ta{A{t)) = True 

lA{q) = False iff 

q ^ F and 

Vr G R s [q\ l A {A{r)) = False 

1d{q) = True iff 

(1) Ta{<1} = True or 

(2) (2.1) 3r G R sd [q] Td(A(r)) = True and 

(2.2) l A (~q) = False and 

(2.3) Vs G R\yq] either 

(2.3.1) Td{A{s)) = False or 

(2.3.2) 3t G R sd [q] such that 
2 9 (A(t)) = True and t > s 

Id(q) = False iff 

(1) T A {q) = False and 

(2) (2.1) Vr G R sd [q] I d (A(r)) = False or 

(2.2) l A (~q) = True or 

(2.3) 3s e R^q] such that 

(2.3.1) Id(A(s)) = True and 

(2.3.2) Vi G R sd [q] either 
Id(A(t)) = False or t f s 

Clearly there is a close correspondence between these conditions and the 
inference rules of DL. The four conditions are if-and-only-if statements. The "if" 
part ensures that all models are deductively closed. The "only-if" part ensures 
that models are abductively closed, in the following sense: if an evaluated literal 
has some epistemic status in a model, then there is a reason, in the model, why 
that status is given. 

We must also represent the meaning of the symbols of S . We might simply 
use a ^-structure V for this purpose, but it turns out that, in general, models 
based on the intended ^-structure T> do not characterize provability in DL. 

Instead we will use the first-order theory of V, denoted Th(T>). Thus we 
will consider all domains that agree with V on first-order sentences. We write 
Th(V), T \= ol c to denote that the conclusion c holds in all defeasible models M 
of T such that T>m is a model of Th(T>) (in the conventional sense of first-order 
logic). That is, if c is +Aq then M^(q) = True, if c is —Aq then M^iq) = False, 
etc. We say that c is a defeasible logical consequence of T and Th(D). 

Taking the defeasible models of Th(V),T as the semantics of the defeasible 
theory T over V, it is straightforward to prove that the proof system is sound. 
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Theorem 1. Let T be a defeasible theory over a domain V. Let c be a conclu- 
sion. 

IfTV-c then Th(V),T \= DL c 

The proof is by induction on the length of proofs. 

4 Completeness 

We now establish the completeness of the inference rules with respect to these 
models. We do this by establishing an intimate connection between 2?-models of 
a defeasible theory T and partial models of a corresponding metaprogram. In 
this section we only outline the proof, since there is not enough space to present 
the requisite background material. 

In |^o| we developed a logic metaprogram Ai for DL. If T is a defeasible 
theory then Air is Ai augmented with a representation of T. It was shown 
in [^O) that the consequences of T are characterized by Air under Kunen's 
semantics for logic programs p7|. 



Theorem 2 ([20]). Let T be a defeasible theory and let Air denote its metapro- 
gram counterpart. Let Ti. be the Herbrand domain over which Air is defined. 
For each literal p, 

1. T h +Ap iff Air, Th(H) V- K definitely(p); 

2. TV- ~Ap iffMr,Th(H) V- K -ndef initely(p); 
S. TV- +dp iff M T , Th(H) V- K def easibly(p); 
I TV- -dp iffM T ,Th{H) V- K -ndef easibly(p); 

Kunen also characterized his semantics of logic programs in terms of 3-valued 
models of the logic program. For any logic program V and literal q, Kunen showed 
that P,Th(H) V- K q iff V,Th(H) \= K q @, where V^ K denotes the 3-valued 
logical consequence relation. 

The remaining step is to relate defeasible models of a defeasible theory T 
with 3-valued models of Air- There is a technical difficulty: defeasible interpre- 
tations of T involve domains with signature E, whereas the signature of domains 
of A4t extends S with function symbols corresponding to LI (and other, auxil- 
iary function symbols) . The problem arises because the metaprogram represents 
predicates as functions. 

We address this problem by defining, for every domain T> over Z 1 , a do- 
main extension V* over the extended signature. We are then able to relate 2?- 
interpretations of T with 3-valued interpretations of Air over T>* . Thus we 
obtain 

Proposition 1. Let T be a defeasible theory over signature S and let T> be a 

domain over this signature. 



• Air,Th{V*) Ha- def initely(g) iffT,Th{V) Hdl +Aq 

• M T ,TK{V*) Ha- -definitely^) iffT,Th(V) Hdl -Aq 
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• M T ,Th(V*) \= K defeasibly(g) iffT,Th(D) \= DL +dq 

• Mr,Th(V*) -defeasibly(q) ifJT 7 Th(V) ^ DL -dq 

Combining these three results together, the completeness (and soundness) of 
the proof system for the model theory is established. 

Theorem 3. Let T be a defeasible theory over signature S and let 7i be the 
Herbrand domain over this signature. Let c be any conclusion. 
T\-ciffTh(H),T\= DL c 

5 Other Defeasible Logics 

The approach of this paper is more widely applicable than simply to DL. In the 
following, we first look at the extension of this approach to a form of DL that is 
not essentially propositional. We then discuss its application to other defeasible 
logics that can be formulated within the flexible framework of |^| . We only have 
space to outline this work. 

5.1 Non-Propositional Defeasible Logic 

The development of the model theory in terms of T> and Th{T>) is an overkill, 
technically, for an essentially propositional logic, such as the presentation of DL 
in Section |[ However, this development makes it easy to extend DL to a first- 
order logic, and to extend it further with pre-defined functions and predicates - 
constraints in the sense of constraint logic programming [ fl6| . 

The only change to the model theory is that the restriction on S (to constants 
and —) is removed, with consequent flow-on affects on D. 

The proof system, as presented in Section ^, is inadequate to handle infinite 
domains, if rules are regarded as schemas for propositional rules. However [^o| 
gives a bottom-up reformulation of the proof system that can handle infinite 
domains, and is easily extended to address constraints. 

With this reformulated proof system, the soundness and completeness con- 
tinues to hold in the presence of constraints over infinite domains. There are 
some elements of the proofs that must change. In particular, the metaprogram 
M must now accommodate constraints and Theorem || must be extended. But 
such changes are not difficult. The extension of Kuncn's result, equating \~k and 
\=k, to arbitrary domains is due to Stuckey p9| . 

5.2 Variants of DL 

As proposed in ||] , the metaprogram presentation of DL can be generalized to a 
framework for the definition of many different defeasible logics. Q presents some 
variants of DL with different proof-theoretic properties. Some of these variants 
involve extra levels of belief, beyond definite and defeasible knowledge. 

Since failure-to-prove in these variants is still characterized by Kunen's se- 
mantics, we can directly apply the techniques of this paper to establish a model 
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theory and prove soundness and completeness of these variants. Technically, all 
that is needed is a definition of model appropriate to the inference rules of the 
logic and a corresponding metaprogram. 

The framework of Q admits other forms of failure-to-prove than Kunen's se- 
mantics. Any semantics for logic programs provides an alternate form of failure- 
to-prove. Indeed, |2^] showed that Wcll-Founded Defeasible Logic is character- 
ized by metaprogram of Section ^ and the well-founded semantics of logic pro- 
grams pot - 

In the well-founded semantics - and many other semantics of logic programs 
- the semantics rests on a single domain of values T>. Thus, in these cases, the 
introduction of Th(T>) is unnecessary. In the case of Well-Founded Defeasible 
Logic there is, essentially, a single model of a defeasible theory T over V, which 
is the reduct of the well-founded (partial) model of A4t- The defeasible logic 
investigated in [||25| performs loop-checking to detect failure-to-prove, which 
makes failure-to-prove in that logic similar to well-founded semantics. This sug- 
gests that a model-theoretic semantics for which that logic is sound and com- 
plete might be established by following the pattern of this paper, but using the 
well-founded semantics in place of Kunen's semantics and using a substantially 
different metaprogram. 

Other semantics, such as the stable model semantics ||, give rise to several 
2?-models for a defeasible theory in the corresponding defeasible logic. 

6 Conclusion 

We have introduced an approach to defining an appropriate model theory for 
defeasible logics. The approach was demonstrated in detail for the logic DL, and 
we outlined how it can be applied to a wide range of defeasible logics. 
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